Overview
overview
4Static
static
1Farrago 2....2).dmg
macos-10.15-amd64
1Farrago 2...._store
macos-10.15-amd64
1Farrago 2....n.icns
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....e.macl
macos-10.15-amd64
1Farrago 2....antine
macos-10.15-amd64
1Farrago 2....bg.png
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....e.macl
macos-10.15-amd64
1Farrago 2....ertags
macos-10.15-amd64
1Farrago 2....antine
macos-10.15-amd64
1Farrago 2....lp.txt
macos-10.15-amd64
1Farrago 2....b7ynxa
macos-10.15-amd64
1Farrago 2....t:rsrc
macos-10.15-amd64
1Farrago 2....T].dmg
macos-10.15-amd64
1Farrago 2....es.nib
macos-10.15-amd64
4Farrago 2....es.nib
macos-10.15-amd64
4Farrago 2....am.wav
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....adata/
macos-10.15-amd64
4Farrago 2....il.m4a
macos-10.15-amd64
4Farrago 2....il.m4a
macos-10.15-amd64
4Farrago 2....op.svg
macos-10.15-amd64
4Farrago 2....ew.svg
macos-10.15-amd64
4Farrago 2....le.svg
macos-10.15-amd64
4Farrago 2....ervice
macos-10.15-amd64
1Farrago 2....ate#ps
macos-10.15-amd64
1Farrago 2....hgz4we
macos-10.15-amd64
1Farrago 2....y:rsrc
macos-10.15-amd64
1Analysis
- max time kernel
368s - max time network
738s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
04/08/2026, 14:19
Static task
static1
Behavioral task
behavioral1
Sample
Farrago 2.1.5 [TNT](2).dmg
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
Farrago 2.1.5/.ds_store
Resource
macos-20250619-en
Behavioral task
behavioral3
Sample
Farrago 2.1.5/.VolumeIcon.icns
Resource
macos-20250619-en
Behavioral task
behavioral4
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral5
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.macl
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
Farrago 2.1.5/.VolumeIcon.icns:com.apple.quarantine
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
Farrago 2.1.5/.background/bg.png
Resource
macos-20250619-en
Behavioral task
behavioral8
Sample
Farrago 2.1.5/.background/bg.png:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral9
Sample
Farrago 2.1.5/.background/bg.png:com.apple.macl
Resource
macos-20250619-en
Behavioral task
behavioral10
Sample
Farrago 2.1.5/.background/bg.png:com.apple.metadata__kmditemusertags
Resource
macos-20250619-en
Behavioral task
behavioral11
Sample
Farrago 2.1.5/.background/bg.png:com.apple.quarantine
Resource
macos-20250619-en
Behavioral task
behavioral12
Sample
Farrago 2.1.5/Help.txt
Resource
macos-20250619-en
Behavioral task
behavioral13
Sample
Farrago 2.1.5/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa
Resource
macos-20250619-en
Behavioral task
behavioral14
Sample
Farrago 2.1.5/Help.txt:rsrc
Resource
macos-20250619-en
Behavioral task
behavioral15
Sample
Farrago 2.1.5/Manual install/Farrago 2.1.5 [TNT].dmg
Resource
macos-20250619-en
Behavioral task
behavioral16
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/FGControllerPreferences.nib
Resource
macos-20250619-en
Behavioral task
behavioral17
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/FGPreferences.nib
Resource
macos-20250619-en
Behavioral task
behavioral18
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/ReverseScream.wav
Resource
macos-20250619-en
Behavioral task
behavioral19
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral20
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral21
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral22
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Metadata/
Resource
macos-20250619-en
Behavioral task
behavioral23
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a
Resource
macos-20250619-en
Behavioral task
behavioral24
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/Sample Sound Sets/Sample List Mode.farragoset/Sound Fil.m4a
Resource
macos-20250619-en
Behavioral task
behavioral25
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.loop.svg
Resource
macos-20250619-en
Behavioral task
behavioral26
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/tile-icon.preview.svg
Resource
macos-20250619-en
Behavioral task
behavioral27
Sample
Farrago 2.1.5/Farrago.app/Contents/Resources/xmark.circle.svg
Resource
macos-20250619-en
Behavioral task
behavioral28
Sample
Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service
Resource
macos-20250619-en
Behavioral task
behavioral29
Sample
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.lastuseddate#ps
Resource
macos-20250619-en
Behavioral task
behavioral30
Sample
Farrago 2.1.5/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we
Resource
macos-20250619-en
Behavioral task
behavioral31
Sample
Farrago 2.1.5/Open Gatekeeper friendly:rsrc
Resource
macos-20250619-en
General
- Target Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service
- Size 201KB
- Sample260804-rmvkessemd
- SHA256 de682f7d7d44f442ae8fb7597c8442c8029aa8b43adfcaacfd9a8397101e66a2
- MD5 a72d73eaf6fbd5e9be865ea5c7e85b17
- SHA1 84b01404daabded91471f45798589d5550d9e9bc
- SHA512 dbbf03ab82ab7df4709dad9a6ced7a7aa196929f70fa80cf15e90c1d7b6df6cff92ee8e052b85fc3a716ac4cd808a0a3d6666ed3376c12c2d20c7d8dadd53506
- SSDEEP 3072:58Bxo5jbTzur+xc2bQ2u+zNSofZcnUSulJ:yBxo5jH3c5UzNSofZcUD
- TLSH T1CB145B433B681C89CA1DB63D4C87E3518833FA856F13821AF691C9691FBF7B5A1039D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service\""1⤵PID:506
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service\""1⤵PID:506
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service"1⤵PID:506
-
/bin/zsh/bin/zsh -c "/Users/run/Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service"2⤵PID:507
-
-
/Users/run/Farrago/Users/run/Farrago 2.1.5/Farrago.app/Contents/XPCServices/Farrago Automation Service.xpc/Contents/MacOS/Farrago Automation Service2⤵PID:507
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:530
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:530
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:531
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:531